Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d559805-5c13-3069-b1c2-ba56e9d3cc96.roa
File: 0d559805-5c13-3069-b1c2-ba56e9d3cc96.roa (raw, json)
Hash identifier: t/QJs++W/UUf3qdN2RDAKZzP9w2SYpQjETR3qtOW+6Q=
Subject key identifier: C8:EB:AD:EE:FB:8A:00:1E:6D:6A:10:D1:D7:81:2C:BA:49:45:C4:DA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0F09D2FEF92391B8E8E440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d559805-5c13-3069-b1c2-ba56e9d3cc96.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:09:d2:fe:f9:23:91:b8:e8:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5d40ebc0-6eff-4dda-ba50-389e31c66c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:9e:9e:0e:2b:62:d6:3a:91:77:cd:83:2c:
95:4e:5c:21:d8:06:b1:9d:3d:0d:c9:33:56:ed:b4:
8f:f5:f2:9a:48:61:ec:92:a7:9c:65:1a:6a:aa:40:
66:26:c3:bd:f5:74:19:2d:0a:55:42:55:3a:c9:cb:
69:d0:7c:89:76:4d:41:1b:77:ca:21:21:76:ba:c4:
86:a9:98:ed:df:15:58:3f:42:9b:e5:fe:d2:6d:d5:
2c:4b:59:08:2d:4e:89:ff:c3:18:8e:77:af:d2:2f:
1d:fa:59:a7:eb:03:df:37:5e:ff:4f:7d:b4:99:09:
fe:0b:80:26:81:50:99:cb:5a:cf:68:41:45:ae:0b:
de:80:76:58:8b:cf:6c:c7:29:f2:20:7a:f0:50:da:
17:ff:e1:e9:6a:73:0a:e3:45:c0:27:83:92:ee:12:
60:d6:2e:25:f0:cc:c3:8c:4c:d0:ed:84:70:be:5e:
4f:11:94:9e:8a:eb:da:e5:a9:60:02:84:5d:56:2f:
c9:84:7b:80:9f:1f:4a:46:ab:85:c8:76:80:cb:0e:
cb:11:eb:0d:e8:e4:db:ab:00:7f:d9:9b:8d:e3:38:
54:06:12:26:8a:e0:66:26:e9:86:0a:bb:13:13:5e:
25:dd:17:a6:e4:c1:5c:ad:c9:c1:8d:84:82:86:e9:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:AD:EE:FB:8A:00:1E:6D:6A:10:D1:D7:81:2C:BA:49:45:C4:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d559805-5c13-3069-b1c2-ba56e9d3cc96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d6:60:01:84:9c:5e:ea:09:be:fa:dc:18:58:0c:5f:94:c5:
49:86:95:db:c1:2e:ea:e5:3b:6d:b6:86:8c:b4:1e:e7:09:f0:
1e:8d:a8:33:74:bf:93:0f:e2:c0:15:ed:77:d7:82:b2:2f:3c:
8e:f2:4e:da:4f:cc:5a:be:14:d6:57:5c:49:ac:57:6a:fa:38:
17:22:f8:40:cb:9b:f7:51:32:72:6b:49:41:b6:14:b0:0b:82:
80:68:c0:73:00:5b:69:b2:24:ed:36:59:7d:0c:3b:9c:0a:6c:
0c:8b:01:22:ff:9c:76:68:b9:6e:f0:f1:db:c1:c7:fb:ad:86:
5e:de:79:af:92:b9:76:23:17:87:9c:90:e8:ba:92:5a:1f:1a:
ea:e6:10:f7:72:97:81:c6:0c:be:93:e9:ce:a9:41:07:b3:f8:
8c:27:b8:2a:b5:a2:33:5c:4f:42:17:89:06:33:a1:e7:f8:d3:
4e:fb:4a:e1:ea:69:24:48:cf:5a:73:b1:74:8e:bb:da:e4:be:
53:d5:4e:44:cc:02:de:57:b8:09:4f:a9:6a:3f:eb:16:2a:ef:
1c:13:d4:45:56:e1:e7:4f:0c:b2:c2:79:8a:59:1f:0a:70:9f:
c9:4c:c9:65:05:6d:5f:5e:dd:b1:41:34:0f:35:a7:62:76:23:
05:18:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:42 2024 by rpki-client on console-fra.rpki-client.org